$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: RmxRvkMpI3XDUPVn5kvp8gNBWqJ9NM7XGbLhtKKZkbY= Subject key identifier: E7:86:93:84:58:D3:3C:EB:41:02:8F:E8:9E:63:7F:48:F9:22:99:F6 Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 038B Signing time: Sat 29 Mar 2025 01:04:37 +0000 Manifest this update: Sat 29 Mar 2025 01:04:36 +0000 Manifest next update: Sat 05 Apr 2025 01:04:36 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: PSsxxLLyG5x9AqSNS+hMcKQm6HLeqX2oJLQNTWCxjZc=) 2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: 7UvGO2r60JLS/okHiWx8rHAHMyUcsuX/jNwXXCmMBho=) 3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: TzVnkqN0tq39UUa2lfdZqlKLVdLg+S4NlfoqQ2G24uU=) 4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: 4G2u0IIjNz0CyenUMTN7OBV5SwfSrRJSXkJu6HMP/+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61 Validity Not Before: Mar 29 01:04:36 2025 GMT Not After : Apr 5 01:04:36 2025 GMT Subject: CN=67e74725-1286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:55:65:77:ea:c7:53:01:4f:7d:c6:62:2f: 9f:59:98:b8:e4:ad:e1:dc:07:41:4f:c6:5e:f9:e4: ff:5b:0b:b2:01:fa:53:3a:bd:fd:7e:c1:2f:b8:bc: e7:17:a1:13:ac:b4:96:ca:3a:60:36:b6:c6:09:c4: 57:f5:5a:4c:1f:2e:56:00:60:64:22:19:f6:5d:49: 22:2d:e0:dd:98:9d:c1:41:8c:94:21:8b:67:02:c2: 74:46:e9:0e:35:04:31:98:df:2a:b7:82:36:fc:3e: 58:22:c1:4b:ee:d3:73:a9:7e:c4:5e:6b:3e:da:4a: bd:3d:9b:3d:2f:a3:8a:95:fd:28:96:13:d0:dc:39: 83:b7:28:b9:bd:1d:cd:57:9f:2b:22:78:ed:69:76: 15:c6:85:c1:24:35:a1:f7:87:0d:a4:98:1a:0a:f2: e7:6f:1d:d2:38:39:24:61:4c:7b:b7:61:56:85:86: ec:77:aa:55:cf:b3:3e:e2:b4:9e:a7:3c:89:6a:77: a8:17:ee:60:b4:a0:98:03:0f:2b:3f:80:f2:1a:38: fd:3d:a0:aa:1c:5e:53:2a:a0:16:0b:0c:49:ef:08: bd:2a:08:5e:08:ec:20:6d:de:57:de:42:ba:28:62: 4d:79:fd:d0:f5:ee:7a:8c:40:36:de:3d:e7:15:f3: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:86:93:84:58:D3:3C:EB:41:02:8F:E8:9E:63:7F:48:F9:22:99:F6 X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:66:c5:99:86:bc:e1:d0:9e:2d:3d:2b:c5:e3:59:12:24:18: 71:10:1d:b5:dc:33:84:db:f4:5a:73:7e:52:2a:4e:c0:8c:ad: bf:1b:d7:4e:a4:1b:fb:da:d5:e9:6e:04:8f:06:3e:03:2a:1f: 81:15:54:6c:28:a6:e0:46:e2:fa:4f:85:6a:84:26:3b:cf:79: 7c:fa:f5:fe:b6:3f:f0:be:e7:2d:a8:79:bc:eb:14:5e:0f:40: 94:95:a9:85:cb:6d:a5:ff:55:59:f0:dc:0a:d1:86:05:91:f2: a6:65:f8:cd:6c:39:88:0a:ab:19:1f:b0:34:4a:83:5f:9b:e8: 12:43:62:9e:44:d5:26:2a:2a:66:50:8c:0c:96:32:20:ff:8b: a4:54:b8:9d:c6:5f:13:bb:c4:3f:ab:69:24:25:7c:bd:bd:4c: 32:15:60:cb:9c:19:4f:93:b3:cf:f3:62:21:5f:ea:07:71:b2: 1d:d6:86:21:c3:5b:da:d4:e1:3f:43:a3:5a:a3:f8:b6:f2:46: 52:9c:66:ab:2d:64:7e:82:45:e8:bc:56:8d:ab:4c:b7:fc:3e: b7:e0:c3:c0:0f:f7:c0:82:87:ed:a9:4b:cf:33:76:59:0d:ac: a0:21:d5:77:10:d5:71:d3:11:f0:1c:ad:82:95:1c:a2:8f:c4: 52:c9:80:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjUwMzI5MDEwNDM2WhcNMjUwNDA1MDEwNDM2WjAYMRYwFAYD VQQDEw02N2U3NDcyNS0xMjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqdVZXfqx1MBT33GYi+fWZi45K3h3AdBT8Ze+eT/WwuyAfpTOr39fsEvuLzn F6ETrLSWyjpgNrbGCcRX9VpMHy5WAGBkIhn2XUkiLeDdmJ3BQYyUIYtnAsJ0RukO NQQxmN8qt4I2/D5YIsFL7tNzqX7EXms+2kq9PZs9L6OKlf0olhPQ3DmDtyi5vR3N V58rInjtaXYVxoXBJDWh94cNpJgaCvLnbx3SODkkYUx7t2FWhYbsd6pVz7M+4rSe pzyJaneoF+5gtKCYAw8rP4DyGjj9PaCqHF5TKqAWCwxJ7wi9KgheCOwgbd5X3kK6 KGJNef3Q9e56jEA23j3nFfNlBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeGk4RY 0zzrQQKP6J5jf0j5Ipn2MB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTZsWZhrzh0J4tPSvF41kSJBhxEB213DOE2/Rac35SKk7AjK2/G9dO pBv72tXpbgSPBj4DKh+BFVRsKKbgRuL6T4VqhCY7z3l8+vX+tj/wvuctqHm86xRe D0CUlamFy22l/1VZ8NwK0YYFkfKmZfjNbDmICqsZH7A0SoNfm+gSQ2KeRNUmKipm UIwMljIg/4ukVLidxl8Tu8Q/q2kkJXy9vUwyFWDLnBlPk7PP82IhX+oHcbId1oYh w1va1OE/Q6Nao/i28kZSnGarLWR+gkXovFaNq0y3/D634MPAD/fAgoftqUvPM3ZZ DaygIdV3ENVx0xHwHK2ClRyij8RSyYDw -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:52 2025 by rpki-client